Frequently asked questions

No. You can create a local profile and start using Graspee immediately with no account, no email, and no internet connection. An account is only needed if you want to sync across devices.

The core of Graspee is free: local profiles, encrypted cloud sync, notes, lists, schedules, manual finance tracking, CSV import, and exports. The paid Plus plan covers automatic bank connections and imports. New accounts can activate one free month of Plus with no card and no automatic billing. If Plus lapses, your data stays readable, and manual entry, CSV import, and exports keep working.

Annual reviews and life-plan notes; warranties, instructions, account numbers, and household reference; recurring practices with retained completion history (workouts, journaling, habits); long-term financial planning alongside the notes that explain it; books read, places visited, family history. The point is the parts of your life you want to look up later, not only this week's tasks.

English, French, and Korean. You can switch languages anytime from the interface.

Yes. Graspee is a Progressive Web App. On most browsers, you can install it to your home screen or desktop directly from the browser. No app store required.

Everything in your profile is encrypted on your device before it is stored or synced, and only your password can unlock it. Technically, your password derives a key (PBKDF2, 200,000 iterations) that encrypts a randomly generated data key (AES-GCM-256), and that key encrypts your data before it leaves the browser. The server only stores encrypted blobs, except for the documented calendar app plaintext exception (Quick Add events staged for your Calendar inbox while pending, and published read-only subscription artifacts).

Sync keeps an encrypted copy of your profile on the server so your other devices can pull it; the server cannot read what it relays. Under the hood, changes travel as Yjs CRDT documents over WebSocket, encrypted on your device before they are sent, and merge automatically when you come back online.

Yes. Settings lets you disconnect a profile from sync (the local profile remains usable offline), reconnect later, or permanently delete the synced profile and its server-side blobs. Local-only profiles never leave your device.

Yes. Graspee is offline-first. All data is stored locally in IndexedDB and works without any network connection. If you have sync enabled, changes are synchronized when you're back online.

You can manually create accounts and transactions, connect your bank through supported providers for automatic imports (a Plus plan feature), or import CSV statements with column mapping and undo. Tag, review, filter, and budget. All finance data is encrypted locally like everything else.

Yes. The CSV importer parses the file, lets you map columns, detects duplicates against existing transactions, and keeps an import history with undo. Manual and connected accounts can coexist.

Plaid for major North American institutions, plus Flinks and MX where the operator has enabled them. Provider availability depends on configuration. Imports may be unavailable, paused, or rate-limited at any time.

No. Bank credentials live inside your encrypted profile. Provider credentials (such as Plaid access tokens, Flinks login IDs, or MX user/member GUIDs) are stored in your encrypted finance data, and if you turn on sync, the server keeps that data only in its client-encrypted form, which it cannot decrypt. The server is a pass-through for provider API calls and may hold sync payloads briefly in memory for recovery, but never durably stores plaintext credentials or transaction data. It keeps only non-reversible HMAC fingerprints of provider connection IDs to enforce per-user link allowance.

Yes. You can connect a calendar app to a synced profile: Quick Add events from your calendar app land in a Graspee Calendar inbox for review, and a read-only subscription echoes that inbox back to your calendar app. Both flows go one way. Calendar app connections require a synced profile because Graspee hosts the calendar endpoints for your devices.

No. Calendar app connections are the only documented plaintext exception. External calendar apps must be able to read .ics, so read-only subscription artifacts are plaintext on the server, and Quick Add events from your calendar app are stored in plaintext while pending in your Calendar inbox so the unlocked browser can import them. After import, ignore, expiry, or tombstone the staged plaintext is scrubbed. Pending events expire after 7 days.

The Calendar inbox is where Quick Add events from your calendar app land before they enter your Graspee data. A Needs review badge marks new events; you can mark them reviewed, ignore them, or resolve conflicts. Review keeps you in control of what enters your encrypted profile. Reminders for these events fire on the calendar app device that holds them; Graspee does not deliver its own reminders for events imported from a calendar app.

Anyone with the URL can. Subscription URLs are bearer-token URLs designed to be readable by any calendar app you paste them into. If a URL is exposed too widely, rotate it from Settings; rotation invalidates every existing subscriber. Treat subscription URLs and CalDAV passwords like the data they unlock.

Local profiles are stored on your device in IndexedDB, encrypted with your password. They do not require a Graspee account or an internet connection to read, so they keep working even if Graspee is offline or paused. You can also export a readable copy of your data as JSON or CSV from Settings at any time.

Yes. Settings > Export data offers a full JSON export, separate contents and finance JSON exports, and a finance CSV package. Exports are generated on your device from the unlocked profile and include archived items that have finished downloading; the app warns you if a snapshot is taken before cloud sync completes. Passwords, keys, and provider credentials are never included. The files are plaintext, so store them somewhere safe. There is no automated re-import yet.

If you had cloud sync enabled, you can restore your data on a new device by signing in and entering your profile password. If you used only local storage, the data exists only on your device with no server backup.